Jwks
JSON Web Key Set (RFC 7517) — one JWK per active signing-key version.
Shape
keysarray of Jwk
- The Jwk schema
- algstringSigning algorithm — always
RS256. - estringBase64url (no padding) RSA public exponent (typically
AQAB). - kidstringThe key's id, equal to the
kidheader of the tokens it signs, so a relying party picks the right key while keys are being rotated. - ktystringKey type — always
RSA. - nstringBase64url (no padding) RSA modulus.
- usestringPublic key use — always
sig(signature verification).
Example
Synthesized example{
"keys": [
{
"alg": "alg-ea39",
"e": "e-2355",
"kid": "kid-69ea",
"kty": "kty-d45d",
"n": "n-7285",
"use": "use-fb41"
},
{
"alg": "alg-e0f1",
"e": "e-f654",
"kid": "kid-3f87",
"kty": "kty-3dc7",
"n": "n-b05c",
"use": "use-62c0"
}
]
}
Graph
Used inside
No schema contains this one.
Contains
Used by
Sent by 0 operations
No operation takes it as a request body.
Returned by 1 operation